GIAC Exam GCIA Topic 7 Question 52 Discussion

Actual exam question for GIAC's GCIA exam

Question #: 52
Topic #: 7

[All GCIA Questions]

Which of the following techniques is used to identify attacks originating from a botnet?

AIFilter

BBPF-based filter

CPassive OS fingerprinting

DRecipient filtering

Show Suggested Answer

Suggested Answer: B

by Junita at Aug 07, 2024, 09:15 AM

Limited Time Offer

25%

Off

Get Premium GCIA Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Cyril

3 months ago

Ah, the age-old battle against those sneaky botnets. I say we just unleash a swarm of cyberbees to sting them into submission. Or maybe we could try D) Recipient Filtering - it's like putting your inbox on a strict diet, no junk mail allowed!

upvoted 0 times

Tu

3 months ago

Let's not forget about BPF-based filter, it could be a powerful tool in our fight against botnets.

upvoted 0 times

...

Vi

3 months ago

I think passive OS fingerprinting could also help us identify those sneaky attacks.

upvoted 0 times

...

Britt

3 months ago

Recipient filtering sounds like a good idea, we need to keep those botnets out!

upvoted 0 times

...

Thea

4 months ago

Hold up, I got a better idea - why not use A) IFilter? It's like a magic wand that can just wave away all those pesky botnet attacks. Seriously though, I think B) is the way to go.

upvoted 0 times

Macy

2 months ago

I'm not sure, but D) Recipient filtering could also work.

upvoted 0 times

...

Howard

2 months ago

But what about C) Passive OS fingerprinting?

upvoted 0 times

...

Crista

2 months ago

I agree, B) BPF-based filter is more effective.

upvoted 0 times

...

Candra

3 months ago

I think A) IFilter is a good choice.

upvoted 0 times

...

Brendan

4 months ago

I'm going to go with D) Recipient filtering. It's a common method for blocking botnet traffic by analyzing the target addresses of suspicious network activity.

upvoted 0 times

Paris

3 months ago

I think BPF-based filter could also be effective in identifying attacks from a botnet. It allows for more granular control over network traffic.

upvoted 0 times

...

Sena

3 months ago

Recipient filtering is a good choice. It helps block botnet traffic by checking the target addresses.

upvoted 0 times

...

Rozella

4 months ago

Hmm, I'm not sure about this one. Could it be C) Passive OS fingerprinting? That seems like a good way to detect botnets based on the infected devices' operating systems.

upvoted 0 times

...

Isabella

4 months ago

I'm not sure, but I think B) BPF-based filter could also be used to identify botnet attacks.

upvoted 0 times

...

Tegan

4 months ago

I agree with Nguyet, Passive OS fingerprinting can help identify botnet attacks.

upvoted 0 times

...

Elden

4 months ago

I think the answer is B) BPF-based filter. It's a powerful technique for identifying botnet attacks by analyzing network traffic patterns.

upvoted 0 times

Myra

2 months ago

Recipient filtering is more commonly used to prevent spam emails, not to identify botnet attacks.

upvoted 0 times

...

Valentine

3 months ago

Passive OS fingerprinting can also be used to identify attacks originating from a botnet.

upvoted 0 times

...

Helga

3 months ago

I agree, BPF-based filter is a commonly used technique to detect botnet attacks.

upvoted 0 times

...

Alline

4 months ago

I think the answer is B) BPF-based filter. It's a powerful technique for identifying botnet attacks by analyzing network traffic patterns.

upvoted 0 times

...

Nguyet

4 months ago

I think the answer is C) Passive OS fingerprinting.

upvoted 0 times

...